← All advisories

Medium severity6.1NVD Advisory· Published Mar 18, 2025· Updated Jun 17, 2026

CVE-2025-25582

CVE-2025-25582

Description

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml.

Affected products

2

yimioa/yimioacpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2024.07.04

Patches

Vulnerability mechanics

References

1

gitee.com/r1bbit/yimioa/issues/IBI74KnvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.